When you are doing manual scan the virus is detected by ClamAV, which means the local AV. When you are doing full system scan, it will use the engines at the cloud to scan. Sometimes the virus signature database for the antivirus engines at the cloud may not be updated yet, so that it is not detected yet when you are doing full system scan. We will try to improve this. Thank you for your feedback.